From fde8a5b03c36b47e2411d599b0f1825918de4bf6 Mon Sep 17 00:00:00 2001
From: Robert Varga <robert.varga@pantheon.tech>
Date: Sat, 18 Dec 2021 13:23:45 +0100
Subject: [PATCH] Bump log4j2 to 2.17.0

https://issues.apache.org/jira/browse/LOG4J2-3230

Change-Id: I7625b1513ea8bf9c02a5dcb7ef8bca0aa7d98a5d
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>
---
 odlparent-dependency-check/pom.xml | 2 +-
 odlparent-lite/pom.xml             | 3 ++-
 odlparent/pom.xml                  | 2 +-
 3 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/odlparent-dependency-check/pom.xml b/odlparent-dependency-check/pom.xml
index be4cbbf0e..e0a0df9d7 100644
--- a/odlparent-dependency-check/pom.xml
+++ b/odlparent-dependency-check/pom.xml
@@ -197,7 +197,7 @@
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-bom</artifactId>
             <type>pom</type>
-            <version>2.16.0</version>
+            <version>2.17.0</version>
         </dependency>
         <dependency>
             <groupId>org.awaitility</groupId>
diff --git a/odlparent-lite/pom.xml b/odlparent-lite/pom.xml
index 394230a61..8e97d1a8c 100644
--- a/odlparent-lite/pom.xml
+++ b/odlparent-lite/pom.xml
@@ -380,7 +380,8 @@
                   <excludes>
                     <!-- https://nvd.nist.gov/vuln/detail/CVE-2021-44228: at least 2.15.0 -->
                     <!-- https://nvd.nist.gov/vuln/detail/CVE-2021-45046: at least 2.16.0 -->
-                    <exclude>org.apache.logging.log4j:log4j-core:(,2.16.0)</exclude>
+                    <!-- https://nvd.nist.gov/vuln/detail/CVE-2021-45105: at least 2.17.0 -->
+                    <exclude>org.apache.logging.log4j:log4j-core:(,2.17.0)</exclude>
                   </excludes>
                 </bannedDependencies>
               </rules>
diff --git a/odlparent/pom.xml b/odlparent/pom.xml
index 7913e8c8d..f13432f63 100644
--- a/odlparent/pom.xml
+++ b/odlparent/pom.xml
@@ -241,7 +241,7 @@
       <dependency>
         <groupId>org.apache.logging.log4j</groupId>
         <artifactId>log4j-bom</artifactId>
-        <version>2.16.0</version>
+        <version>2.17.0</version>
         <scope>import</scope>
         <type>pom</type>
       </dependency>
-- 
2.36.6